There seems to be a general consensus that people shouldn't implement their own cryptography but rather rely on pre-existing standards.

Should we permit questions that discuss implementing a standard (AES, PGP, etc) in contrast to homebrew crypto that isn't affiliated (or diverges from) a known standard?


1 Answer 1

up vote 11 down vote accepted

Where the implementation is something a security professional has to be aware of, then this should be on-topic, however if it is the case that the question is purely a coding one (ie it isn't about security decisions, but is about coding or configuration) then I would feel it would be offtopic here, but possibly better served on SO, SF, SU or even one of the specific sites such as Ask, Android etc.

Agreed. On the other hand, if it is about the details of the algorithm, then it would be better on Crypto. – AviD Jan 2 '13 at 21:52
Seems like how the algorithm works is crypto, how the algorithm is used is Security and how the algorithm is implemented is StackOverflow. – AJ Henderson Jan 4 '13 at 3:23
@AJHenderson and whether [hipster language of the week] is the "best" language for implementing it is Programmers. – user185 Jan 14 '13 at 11:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .